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Method and system for managing digital rights 



1 17.03.2003 



The invention relates to a method of managing digital rights, and in particular 
to a method that comprises the steps of transmitting to a server a request for a digital right 
and receiving a digital right from the server. 

The invention further relates to a computer program enabling a programmable 
device to carry out a method of managing digital rights. 

The invention further relates to a system for managing digital rights, 
comprising a client able to carry out a method of managing digital rights and a server. 

The invention further relates to an electronic device able to carry out a method 
of managing digital rights. 

An example of such a method is known from US 6,330,670. The known 
method comprises transmitting to a server a request for a content item and for a digital right 
to the content item, e.g. a license and/or a content decryption key. The known method is 
executed by a digital rights management operating system (DRMOS). In one embodiment of 
the known method, it comprises receiving a content item encrypted using secure socket layer 
services and receiving a license placing restrictions on the use of the content item In this 
embodiment, the DRMOS writes the encrypted content item to permanent storage and 
securely stores the session key for later use. The known method provides a certain level of 
security by including in the request appropriate certificates/identities for a CPU, a DRMOS 
and an application. The server will only transmit the content item and the license if it trusts ' 
the CPU, the DRMOS, and the application. 

Although the DRMOS does protect digital righte from being copied by 
unauthorized operating system components and unauthorized applications, it does not protect 
digitelrights from being copied by unauthorized hardware components, e.g. snooping devices 
monitoring communication between a CPU and a memory of an electronic device. 
Unauthorized copying of a digital right is especially problematic when the digital right 
provides access to multiple instances of a content item, e.g. as a result of broadcasting the 
content item. c 
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It is a first object of the invention to provide a method of the kind described in 
the opening paragraph, by which protection against unauthorized hardware components is 
enhanced. 

It is a second object of the invention to provide a system of the kind described 
5 in the opening paragraph, which is protected better against unauthorized hardware 
components. 

It is a third object of the invention to provide an electronic device of the kind 
described in the opening paragraph, which is protected better against unauthorized hardware 
components. 



The first object is according to the invention realized in that the method 
comprises the steps of: transmitting to a server a request for a digital right to an encrypted 
content item, the request comprising a circuit identifier identifying an integrated circuit and a 

15 content identifier identifying the encrypted content item; receiving an encrypted digital right 
from the server, the encrypted digital right being encrypted using a public key associated 
with the integrated circuit; and instructing the integrated circuit to decrypt the encrypted 
digital right using a private key associated with the integrated circuit, the private key being 
stored in the integrated circuit, and to store the digital right in the integrated circuit 

20 To ensure protection against unauthorized hardware components, it is 

important to use tamperproof hardware components in vulnerable devices and to use a 
suitable encryption mechanism between tamperproof hardware components or between a 
tamperproof hardware component and a trusted device. An integrated circuit may be 
considered tamperproof. It is extremely difficult to monitor communication between a 

25 processor and a memory located in a single integrated circuit and it is extremely difficult to 
continue using an integrated circuit if one were to succeed in reading the memory of the 
integrated circuit A suitable encryption mechanism is required for communication between 
an integrated circuit and other components or devices. By encrypting a digital right with a 
public key associated with an integrated circuit and storing the matching private key 

30 associated with the integrated circuit only in the integrated circuit itself, it can be ensured that 
only the integrated circuit is able to decrypt the digital right. 

A digital right may comprise a license and/or a content decryption key. A 
license may for example specify how many times a content item maybe reproduced or 
copied and/or during which period a content item maybe reproduced. A content decryption 
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ke ym aybeu S ed to deo W ««h ec <^ ti «e mmapMoftoooI ^ tittmA 

°T S l!! IUrality ° t ""* a " teyS ' A"™*** " "Wright may comprise , 

^cation abletoge^ content deepen keys 

from an integrated the server may be able to refuse .ssnsmWfing ^ „. 

me request contains me circuit identifier hidden in the compromised digital right 

m» embodiment oftne method of the invention, finther comprised ia me step 
of recervmg the content identifier identifying the encrypted content hem using . receiver A 
content distributor may for example broadcast the content identifier together with the 
encryptedconten, item identifiedby me content idennfiar. Altetnattveiy, a mobUe phone may 
for example receiva a content identifier from a decoder in a set-top box, DVD player or 
television Broadcasting an encrypted content item wiU ganeraUy result m a diatiibution of 
multiple tnstances of me content item, whetein a digital right to the content item provides 
access to ail the multiple instances of the content item. It is then especially important to 
prevent illegal distribution of the digital right 

TOe ^^^^«»^*estepofretrievmgmecontem 
tdentrtymg me encrypted content item from a storage means storing the encrypted content 
ttem. Thecontentidentifier may for example be stored on an optical medium, on a magnetic 
mednun, or on solid stete memory. The content identifier may be stored with me content 
ttem. Ms embodiment may for example be ^mradl^amobUephoneconteiningasmall 
fonn fbcmr optical disc reader such as a Portable Blue reader. If content is dishibnted to 
mutople users on multiple optical discs, the encryption of each optic* disc may either be 
.dentinal or diffcrent If me encryption of each disc is identic, preventing disnibuuon of a 
dtg-tal nght to a content item on the discs is especially important Encrypting each disc 
differently in effect creates multiple encrypted content items. 

The method may further comprise me step of re-encrypting the digital right 
and copying the re-encrypteo mgiWrigh, to a storage means. Copying a digftal right to a 
content ttem from a device performing the method to an external storage means or to an 
mtemal storage means containing a removable medium, enables reproduction of me content 
ttem on another device. To ensure protection against unautoorized software or hardware 
components, re-encrypting me digital right and copying me re-encrypted digital right to a 
stomge means is advisable. If me ncense does no, allow more than one copy per license, me 
rngtMnghttastoberemovedfromtttedevicoperfern^mentemo^ ^ 
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integrated circuit in an optical disc writer may also be used as the integrated circuit of the 
method. The integrated circuit in the optical disc writer, e.g. a Portable Blue writer, may then 
be used as the integrated circuit of the method as well as re-encrypt the digital right using a 
secret key that is only known to authorized integrated circuits. This provides a high level of 
5 security. 

The method may further comprise the step of obtaining a content decryption 
key for decrypting at least part of the encrypted content item from the integrated circuit, the 
content decryption key being computed by the integrated circuit using the digital right stored 
in the integrated circuit This embodiment may be sufficiently secure if the content item is 

10 broadcast and relatively quickly loses value, e.g. a sports broadcast By using different 
content decryption keys for different parts of a content item or for different content items, 
parts or content items that have not yet been broadcast cannot be accessed using a comprised 
content decryption key. 

The method may further comprise the step of transmitting the content 

15 decryption key to a content decrypting means. This embodiment may for example enable a 
user of a mobile phone to have a set-top box comprising the content decryption means 
reproduce a content item without the need for the user to insert a smart card into the set-top 
box. 

The method may further comprise the step of obtaining at least a part of the 
20 encrypted content item in decrypted form from the integrated circuit, decryption of the 

encrypted content item being performed by the integrated circuit using the digital right stored 
in the integrated circuit This embodiment protects a content decryption key from being 
compromised. The decrypted content item may still be recorded without permission by using 
unauthorized hardware components, but the decrypted content item is generally much larger 
25 than the content decryption key and therefore more difficult to distribute. The integrated 

circuit may also add a watermark that includes the circuit identifier to the decrypted content 
item to be able to detect whether and where the content item was illegally recorded. 



30 The second object is according to the invention realized in that the system 

comprises: a server able to receive from a client a request for a digital right to an encrypted 
content item, the request comprising a circuit identifier identifying an integrated circuit and a 
content identifier identifying the encrypted content item, to perform one of creating and 
retrieving the digital right; to retrieve a public key associated with the integrated circuit from 
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a server storage means, to encrypt the digital right using the public key, and to transmit the 
digital right in encrypted form to the client; and a client able to transmit to the server the 
request for the digital right, able to receive an encrypted digital right from the server, and 
able to instruct the integrated circuit to decrypt the digital right using a private key associated 
with the integrated circuit, the private key being stored in the integrated circuit, and to store 
the digital right in the integrated circuit 

The server may for example retrieve the digital right to the content item if the 
digital right is identical for all users. The digital right may for example be retrieved from an 
internal storage means or from a further server. The further server may be owned by a trusted 
third parry. The server may alternatively create the digital right to the content item if the 
digital right should be different for different integrated circuits. The server may be able to 
store the public key associated with the integrated circuit itself or it may be able to retrieve 
the public key from another trusted system. For optimal protection, the public key may be 
retrieved directly from a server owned by a party able to verify that the public key is 
associated with the private key, for example a party responsible for generating both the 
private key and the public key. Enabling the server to retrieve the public key, e.g. from a 
certification authority such as Verisign, instead of allowing the integrated circuit to provide a 
public key certified by a certification authority is advantageous, since it avoids the problems 
that may occur when a certificate is compromised, e.g. stolen. An unauthorized party might 
use the compromised certificate to certify its own public key. 



The third object is according to the invention realized in that the electronic 
device comprises: a transmitter able to transmit a first electromagnetic signal; a receiver able 
to receive a second electromagnetic signal; an integrated circuit able to store a private key 
associated with the integrated circuit, able to decrypt an encrypted digital right using the 
private key, and able to store a digital right; and a control unit able to instruct the transmitter 
to transmit in a first electronic signal a request for a digital right to an encrypted content item, 
Ihe request comprising a circuit identifier identifying the integrated circuit and a content 
identifier identifying the encrypted content item, to use the receiver to receive in a second 
electromagnetic signal an encrypted digital right, the encrypted digital right being encrypted 
using a public key associated with the integrated circuit, and able to instruct the integrated 
circuit to decrypt the encrypted digital right and to store the digital right. 
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In an embodiment, the electronic device comprises a mobile phone. Modem 
mobile phones are increasingly becoming able to reproduce content, e.g. MP3 music and 
MPEG-4 video. With the prospect of distributing small form factor optical discs like Portable 
Blue discs, whose digital rights may be bought on-line, the need for management of digital 
5 rights on a mobile phone has increased. 

The electronic device may further comprise a non- volatile memory for storing 
the digital right in encrypted form. If it is not possible or not advantageous to store the digital 
right directly on a permanent storage means, e.g. an optical disc writer containing a writable 
optical disc, it may be advantageous to store the digital right in a non- volatile memory of the 
1 0 electronic device. The digital right should be stored in encrypted fonn for reasons of security. 
It may not be advantageous to store the digital right directly on a permanent storage means, 
when Ibis consumes relatively much power, when the storage means does not contain a 
standardized key-locker, or when the key-locker cannot be written to. The integrated circuit 
may also comprise non- volatile memory, but this may not be large enough to store enough 
15 digital rights. 

These and other aspects of the method, system, and electronic device of the 
invention will be further elucidated and described with reference to the drawings, in which: 
20 Fig.l is a flow diagram of the method; 

Fig.2 is a flow diagram of a first embodiment of the method; 
Fig.3 is a flow diagram of a second embodiment of the method; 
Fig.4 is a diagram of an embodiment of the system; 
Fig.5 is a block diagram of the electronic device; 
25 Corresponding elements within the drawings are identified by the same 

reference numeral. 

The method of the invention, see Fig. 1, comprises three steps. Step 1 
30 comprises transmitting to a server a request for a digital right to an encrypted content item, 
the request comprising a circuit identifier identifying an integrated circuit and a content 
identifier identifying the encrypted content item. Step 3 comprises receiving an encrypted 
digital right from the server, the encrypted digital right being encrypted using a public key 
associated with the integrated circuit Step 5 comprises instructing the integrated circuit to 
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decrypt the encrypted digital right using a private key associated with the integrated circuit, 
the private key heing stored in the integrated circuit, and to store the digital right in the 
integrated circuit. The integrated circuit may he a relatively simple microchip as present on 
most smart cards or a powerful microprocessor. Step 5 may for example be performed 
directly after step 3 or just before a next step. In the latter case, the encrypted digital right is 
temporarily stored elsewhere, e.g. in a non-volatile memory. 

The method may further comprise step 7 and/or step 9: Step 7 comprises 
obtaining a content decryption key for decrypting at least part of the encrypted content item 
from the integrated circuit, the content decryption key being computed by the integrated 
circuit using the digital right stored in the integrated circuit A content decryption key may 
enable decryption of apart of the content item or of the entire content item Step 9 comprises 
obtaining at least a part of the encrypted content item in decrypted form from the integrated 
circuit, decryption of the encrypted content item being performed by the integrated circuit 
using the digital right stored in the integrated circuit 

The first embodiment of the method, see Fig. 2, comprises step 21 receiving 
the content identifier identifying the encrypted content item using a receiver. In this 
embodiment, the content identifier is received from a content decrypting means, for example 
a decoder embedded in a set-top box or DVD player. The receiver may for example be a 
radio frequency receiver. The first embodiment further comprises step 1 transmitting to a 
server a request for a digital right to an encrypted content item, step 3 receiving an encrypted 
digital right from the server, and step 5 instructing the integrated circuit to decrypt the 
encrypted digital right using a private key associated with the integrated circuit The first 
embodiment also comprises step 7 obtaining a content decryption key for decrypting at least 
part of the encrypted content item from the integrated circuit the content decryption key 
being computed by the integrated circuit using the digital right stored in the integrated circuit 
Additionally, the first embodiment of the method comprises step 23 transmitting the content 
decryption key to the content decrypting means. 



The second embodiment of the method, see Fig.3, comprises step 41 retrieving 
the content identifier identifying the encrypted content item from a storage means storing the 
encrypted content item The storage means may for example be an optical disc reader 
containing an optical disc, a magnetic storage means, e.g. a hard disc, or a solid state - 
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memory, e.g. MRAM. The second embodiment further comprises step 1 transmitting to a 
server a request for a digital right to an encrypted content item, step 3 receiving an encrypted 
digital right from the server, and step 5 instructing the integrated circuit to decrypt the 
encrypted digital right using a private key associated with the integrated circuit 
5 The second embodiment of the method also comprises step 9 obtaining at least 

a part of the encrypted content item in decrypted form from the integrated circuit, decryption 
of the encrypted content item being performed by the integrated circuit using the digital right 
stored in the integrated circuit. The integrated circuit may for example comprise a digital 
signal processor optimized for MPEG-2 or MPEG-4 decoding. The at least part of the content 

10 may for example be obtained with a request comprising the content identifier. Alternatively, 
the content identifier may be communicated to the integrated circuit before any part of the 
content item is obtained. Additionally, the second embodiment comprises step 43 re- 
encrypting the digital right and copying the re-encrypted digital right to a storage means. This 
is possible if the storage means is writable, for example if it comprises an optical disc writer 

15 containing a writable optical disc. The optical disc may contain a standardized key-locker in 
which the digital right may be securely stored. 

The embodiment of the system of the invention, see Fig.4, comprises a server 
20 61 and a client 63. The server 61 is able to receive from a client 63 a request for a digital 
right to an encrypted content item, the request comprising a circuit identifier identifying an 
integrated circuit embedded in the client 63 and a content identifier identifying the encrypted 
content item. The server 61 is further able to perform one of creating and retrieving the 
digital right and to retrieve a public key associated with the integrated circuit from a server 
25 storage means. The server 61 is also able to encrypt the digital right using the public key and 
to transmit the digital right in encrypted form to the client 63. In Fig. 4, the server 61 is a 
computer connected to the Internet The client 63 is able to transmit to the server 61 the 
request for the digital right. The client 63 is further able to receive an encrypted digital right 
from the server 61. The client 63 is also able to instruct the integrated circuit to decrypt the 
30 digital right using a private key associated with the integrated circuit, the private key being 
stored in the integrated circuit, and to store the digital right in the integrated circuit. 

In Fig.4, the client 63 is a mobile phone that is able to communicate with a 
content decrypting means embedded in another device 65, e.g. in a TV. In this embodiment, 
the client 63 transmits to and receives from a base station 67 of a wireless network, e.g. a 
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UMTS network or a wireless LAN. The server 6 1 transmits and receives through a wired 
network. Alternatively, the client 63 may for example he a set-top box, a DVD player, a TV 
or an external decoder and the client 63 and/or the server 61 may communicate using any 
other network technology. The client 63 and the server 61 may communicate via a bridge 
device. The client 63, e.g. a set-top box, may for example communicate to the server 61 via a 
mobile telephone. The client 63 and the mobile telephone may for example communicate 
using Bluetooth while the mobile telephone and the server 61 may communicate using 
UMTS. 6 

The electronic device 81 of the invention, see Fig. 5, comprises a transmitter 
83, a receiver 85, an integrated circuit 87, and a control unit 89. The transmitter 83 is able to 
transmit a first electromagnetic signal. The receiver 85 is able to receive a second . 
electromagnetic signal: The electromagnetic signal may for example be a radio signal, an 
optical signal, or an electrical signal. The transmitter 83 and the receiver 85 may be the same 
physical component, e.g. a Radio Frequency transceiver. The transmitter 83 and the receiver 
85 may be able communicate with a base station of a wireless network using an antenna 91 
The antenna 91 may be internal or external. The integrated circuit 87 is able to store a private 
key associated with the integrated circuit 87, able to decrypt an encrypted digital right using 
the private key; and able to store a digital right The integrated circuit 87 may for example be 
a powerful microprocessor or a relatively simpler microchip as found on smart cards The 
control unit 89 is able to instruct the transmitter 83 to transmit in a first electronic signal a 
request for a digital right to an encrypted content item, the request comprising a circuit 
identifier identifying the integrated circuit 87 and a content identifier identifying the 
encrypted content item The control unit 89 is further able to use the receiver 85 to receive in 
a second electromagnetic signal an encrypted digital right, foe encrypted digital right being 
encrypted using a public key associated with the integrated circuit 87. The control unit 89 is 
also able to instruct foe integrated circuit 87 to decrypt foe encrypted digital right and to store 
foe digital right in foe circuit's memory. The control unit 89 may for example be a 
microprocessor. The control unit 89 and foe integrated circuit 87 may be foe same physical 
component The integrated circuit 87 comprises writable memory for storing foe digital right 
The writable memory may be volatile, e.g. RAM or non-volatile, e.g. MRAM or EEPROM. 

The electronic device 81 may comprise a mobile phone. Alternatively, foe 
electronic device 8 1 may comprise a TV, a set-top box, or a DVD player. The electronic 
device 81 may further comprise a non-volatile memory 93 for storing foe digital right in 
encrypted form The non-volatile memory 93 may for example be MRAM or Flash memory 
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The non-volatile memory 93 maybe used to store encrypted digital rights for a longer period 
of time. The integrated circuit 87 may for example use a secret password to encrypt the 
digital rights or it may use its own public key. The electronic device 91 may comprise an 
optical disc writer 95, e.g. a Portable Blue writer. The optical disc writer 91 may use the 
5 integrated circuit 87 for storing the digital rights on an optical disc. 

While the invention has been described in connection with preferred 
embodiments, it will be understood that modifications thereof within the principles outlined 
above will be evident to those skilled in the art, and thus the invention is not limited to the 
preferred embodiments but is intended to encompass such modifications. The invention 

10 resides in each and every novel characteristic feature and each and every combination of 
characteristic features. Reference numerals in the claims do not limit their protective scope. 
Use of the verb "to comprise" and its conjugations does not exclude the presence of elements 
other than those stated in the claims. Use of the article "a" or "an" preceding an element does 
not exclude the presence of a plurality of such elements. 

15 'Means', as will be apparent to a person skilled in the art, are meant to include 

any hardware (such as separate or circuits or electronic elements) or software (such as 
programs or parts of programs) which perform in operation or are designed to perform a 
specified function, be it solely or in conjunction with other functions, be it in isolation or in 
co-operation with other elements. The invention can be implemented by means of hardware 

20 comprising several distinct elements, and by means of a suitably programmed computer. In 
the apparatus claim enumerating several means, several of these means can be embodied by 
one and the same item of hardware. "Computer program' is to be understood to mean any 
software product stored on a computer-readable medium, such as a floppy disk, 
downloadable via a network, such as the Internet, or marketable in any other manner. 
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CLAIMS: 



1- A method of managing digital rights, comprising the steps of: 

transmitting (D to a server a request for a digital right to an encrypted content 

item, the request comprising a circuit identifier identifying an integrated circuit and a content 

identifier identifying the encrypted content item; 

receiving (3) an encrypted digital right from the server, the encrypted digital 

nghtheingencryptedusingapubhckeyassociatedwimthemtegmte^ and 

instructing (5) the integrated circuit to decrypt the encrypted digital right using 

a private key associated with the integrated circuit, the private key being stored in the 

integrated circuit, and to store the digital right in the integrated circuit 

2- A method as claimed in claim 1, further comprising the step of receiving (21) 

the content identifier identifying the encrypted content item using a receiver. 

3. A method as claimed in claim 1, further comprising the step of retrieving (41) 

the content identifier identifying the encrypted cont^t item from a stomge mear. storing me 
encrypted content item. 

* A meth °d ™ claimed in claim 1, further comprising the step of re-encrypting 

(43) the digital right and copying the re-encrypted digital right to a storage means. 

5- A method as claimed in claim 1, further comprising the step of obtaining (7) a 
content decryption key for decrypting at leastpartofthe encrypted content item from the 
mtegrated circuit, the content decryption key being computed by the integrated circuit using 
the digital right stored in the integrated circuit 

6- A method as claimed in claim 5, further comprising the step of trar^mitting 
(23) the content decryption key to a content decrypting means. 
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7. A method as claimed in claim 1, further comprising the step of obtaining (9) at 
least a part of the encrypted content item in decrypted form from the integrated circuit, 
decryption of the encrypted content item being performed by the integrated circuit using the 
digital right stored in the integrated circuit. 

8. A computer program enabling a programmable device to carry out a method as 
claimed in claim 1 . 



9. A system for managing digital rights, comprising: 

10 a server (61) able to receive from a client a request for a digital right to an 

encrypted content item, the request comprising a circuit identifier identifying an integrated 
circuit and a content identifier identifying the encrypted content item; to perform one of 
creating and retrieving the digital right; to retrieve a public key associated with the integrated 
circuit from a server storage means; to encrypt the digital right using the public key; and to 
1 5 transmit the digital right in encrypted form to the client (63); and 

a client (63) able to transmit to the server (61) the request for the digital right; 
able to receive an encrypted digital right from the server (61); and able to instruct the 
integrated circuit to decrypt the digital right using a private key associated with the integrated 
circuit, the private key being stored in the integrated circuit, and to store the digital right in 
20 the integrated circuit 



10. An electronic device (81), comprising: 

a transmitter (83) able to transmit a first electromagnetic signal; 
a receiver (85) able to receive a second electromagnetic signal; 
25 an integrated circuit (87) able to store a private key associated with the 

integrated circuit; able to decrypt an encrypted digital right using the private key; and able to 
store a digital right; and 

a control unit (89) able to instruct the transmitter to transmit in a first 
electronic signal a request for a digital right to an encrypted content item, the request 
30 comprising a circuit identifier identifying the integrated circuit and a content identifier 
identifying the encrypted content item; to use the receiver to receive in a second 
electromagnetic signal an encrypted digital right, the encrypted digital right being encrypted 
using a public key associated with the integrated circuit; and able to instruct the integrated 
circuit to decrypt the encrypted digital right and to store the digital right 
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11. 



An electronic device (81) as claimed in claim 10, comprising a mobile phone. 



12. An electronic device (81) as claimed in claim 10, further comprising a non- 

volatile memory (93) for storing the digital right in encrypted form. 
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ABSTRACT: 



In the method of the invention, a request for a digital right to an encrypted 
content item is transmitted to a server (61). The request contains a circuit identifier 
identifying an integrated circuit and a content identifier identifying the encrypted content 
Subsequently, an encrypted digital right, being encrypted using a public key associated with 
me integrated circuit, is received from the server (61). Furthermore, the integrated circuit is 
instructed to decrypt the encrypted digital right using a private key associated with the 
integrated circuit and to store the digital right in the integrated circuit The private key is 
being stored in the integrated circuit The system of the invention contains a client (63) 
performing the method and a server (61) as referred to in the method. The electronic device 
performs the method of the invention. 
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&BLURRED OR ILLEGIBLE TEXT OR DRAWING 

□ SKEWED/SLANTED IMAGES 

□ COLOR OR BLACK AND WHITE PHOTOGRAPHS 

□ GRAY SCALE DOCUMENTS 

□ LINES OR MARKS ON ORIGINAL DOCUMENT 

□ REFERENCE(S) OR EXHIBIT(S) SUBMITTED ARE POOR QUALITY 

□ OTHER: . " 

IMAGES ARE BEST AVAILABLE COPY. 
As rescanning these documents will not correct the image 
problems checked, please do not report these problems to 
the IFW Image Problem Mailbox. 
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□ IMAGE CUT OFF AT TOP, BOTTOM OR SIDES 
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